Extreme Networks BlackDiamond 6800 MPLS Guide de l'utilisateur Page 141

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 176
  • Table des matières
  • DEPANNAGE
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 140
MPLS Module Installation and User Guide 8-7
Configuring Access Profiles
Specifying Subnet Masks
The subnet mask specified in the access profile command is interpreted as a prefix mask.
A prefix mask indicates the bits that are significant in the IP address. In other words, a
prefix mask specifies the part of the address that must match the IP address to which
the profile is applied.
If you configure an IP address that is an exact match that is specifically denied or
permitted, use a mask of /32 (for example, 141.251.24.28/32). If the IP address
represents all addresses in a subnet address that you wish to deny or permit, then
configure the mask to cover only the subnet portion (for example, 141.251.10.0/24). The
keyword
exact
may be used when you wish to match only against the subnet address,
and ignore all addresses within the subnet.
If you are using off-byte boundary subnet masking, the same logic applies, but the
configuration is more complicated. For example, the address 141.251.24.128/27
represents any host from subnet 141.251.24.128.
The following command example adds an
ipaddress
to the access-profile
cold
:
config access-profile cold add 10 permit ipaddress 192.165.100.0/24
See “Route Map Configuration Examples” on page 8-13 for more details about
configuring access policies.
Sequence Numbering
You can specify the sequence numbering for each access profile entry. If you do not
specify a sequence number, entries are entered in the order they are added. Each entry
is assigned a value of 5 more than the sequence number of the last entry. The total
number of access profile entries supported by the MPLS module is 256.
Permit and Deny Entries
If you have configured the access profile mode to be
none
, you must specify each entry
type as either
permit
or
deny
. If you do not specify the entry type, it is added as a
permit entry. If you have configured the access profile mode to be
permit
or
deny
, it is
not necessary to specify a type for each entry.
Vue de la page 140
1 2 ... 136 137 138 139 140 141 142 143 144 145 146 ... 175 176

Commentaires sur ces manuels

Pas de commentaire